Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138372e302f32342d3234203d3e20323634343235.roa
File:                     3133312e3232312e3138372e302f32342d3234203d3e20323634343235.roa (raw, json)
Hash identifier:          XI1OrVwYwYz21q8T5j/YU2ygCcRGZ+kLyh9fvB0gWuw=
Subject key identifier:   26:7F:D0:B1:F1:F6:D4:93:8D:42:30:B9:6E:A5:96:8A:D8:CD:00:27
Certificate issuer:       /CN=C4B5041C433317D641803C99F33EBAC111F4589E
Certificate serial:       1504C0964C2EA2EBCC48217597773378A57E9D2A
Authority key identifier: C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138372e302f32342d3234203d3e20323634343235.roa
Signing time:             Wed 15 Apr 2026 17:58:36 +0000
ROA not before:           Wed 15 Apr 2026 17:53:36 +0000
ROA not after:            Wed 14 Apr 2027 17:58:36 +0000
asID:                     264425
IP address blocks:        131.221.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:04:c0:96:4c:2e:a2:eb:cc:48:21:75:97:77:33:78:a5:7e:9d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B5041C433317D641803C99F33EBAC111F4589E
        Validity
            Not Before: Apr 15 17:53:36 2026 GMT
            Not After : Apr 14 17:58:36 2027 GMT
        Subject: CN=267FD0B1F1F6D4938D4230B96EA5968AD8CD0027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:7b:9b:2f:23:00:04:40:f7:e6:84:a2:5f:
                    a0:d9:fb:6d:0c:06:48:d2:65:59:3c:7c:6f:bc:c3:
                    25:7e:b6:c2:97:5d:b5:ed:60:cc:3a:9d:2f:56:2d:
                    89:a6:50:99:32:34:a2:96:6e:40:83:f3:f1:58:46:
                    3d:af:ac:40:ca:b8:c8:34:48:01:e3:ae:6d:8d:2b:
                    45:89:d7:d4:3d:63:a4:7a:36:a6:dd:11:8e:ad:5a:
                    87:2b:b5:d7:01:50:63:12:cc:34:60:5f:9b:c6:02:
                    32:8e:83:15:ec:cd:f7:4a:53:cc:82:d5:c0:ec:20:
                    e6:f3:a9:c8:7c:27:9f:dc:a8:98:86:72:e2:36:90:
                    ed:72:2c:8d:b8:3a:e5:f8:4e:97:43:60:75:b4:e0:
                    34:71:d6:80:08:c6:e3:cb:1c:0f:d7:75:17:7c:b0:
                    7f:eb:33:a0:9a:ec:ca:ae:eb:30:29:b5:e4:2b:ee:
                    89:cb:aa:49:11:b4:eb:a9:95:d5:ee:fb:fd:01:77:
                    a1:da:d2:3a:d6:60:78:d3:d9:0a:7e:86:b5:c5:cb:
                    9f:70:d6:b3:7d:8c:75:41:b4:ad:b1:a9:af:ad:fc:
                    32:3a:c3:79:ef:ab:ab:53:3d:57:02:f7:fe:00:01:
                    26:ff:41:02:67:41:e7:ad:b6:f0:88:9b:d8:e2:ec:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7F:D0:B1:F1:F6:D4:93:8D:42:30:B9:6E:A5:96:8A:D8:CD:00:27
            X509v3 Authority Key Identifier:
                keyid:C4:B5:04:1C:43:33:17:D6:41:80:3C:99:F3:3E:BA:C1:11:F4:58:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/C4B5041C433317D641803C99F33EBAC111F4589E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B5041C433317D641803C99F33EBAC111F4589E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138372e302f32342d3234203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:3e:83:10:3d:9c:0f:ef:94:ba:94:ad:11:dd:0a:97:3f:b2:
         6d:0a:21:52:8b:59:6e:7e:6a:99:fa:c9:8e:dc:8d:a5:13:1e:
         b1:f0:ba:17:08:45:ee:f7:0a:5a:f4:15:07:58:e0:9b:b2:47:
         8b:6b:6b:0f:c0:96:78:35:d5:a9:db:54:d1:c1:43:df:ad:26:
         93:af:22:6d:8a:54:86:00:22:84:be:13:f4:07:7a:9b:44:91:
         7d:30:82:ab:be:9e:9f:a3:37:14:ec:cf:f0:ca:d5:eb:3b:12:
         99:9a:52:e4:1b:2f:58:53:f3:d4:0a:95:8f:c2:00:dd:b9:dd:
         e9:7c:f8:e9:be:91:b4:bf:9a:01:62:06:e2:34:b0:32:18:d7:
         28:97:26:9d:c8:ec:6e:58:60:d9:ab:33:7f:00:16:17:2d:f4:
         3e:db:b9:26:94:0e:b5:ef:39:64:1b:d3:91:bb:2d:93:cb:2b:
         0a:09:1f:de:1f:e7:24:e3:08:15:87:76:f9:cc:36:c2:85:99:
         74:4f:b3:ad:e5:a9:22:16:f0:45:a9:f6:88:96:4a:5a:fb:01:
         5b:75:72:b8:6c:29:d4:07:f3:70:85:97:3f:14:01:e3:9c:4e:
         14:aa:7c:08:e3:c2:b9:54:d3:05:76:c2:a6:f3:b9:e2:63:66:
         14:89:02:3e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFQTAlkwuouvMSCF1l3czeKV+nSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRCNTA0MUM0MzMzMTdENjQxODAzQzk5RjMzRUJBQzEx
MUY0NTg5RTAeFw0yNjA0MTUxNzUzMzZaFw0yNzA0MTQxNzU4MzZaMDMxMTAvBgNV
BAMTKDI2N0ZEMEIxRjFGNkQ0OTM4RDQyMzBCOTZFQTU5NjhBRDhDRDAwMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWVnubLyMABED35oSiX6DZ+20M
BkjSZVk8fG+8wyV+tsKXXbXtYMw6nS9WLYmmUJkyNKKWbkCD8/FYRj2vrEDKuMg0
SAHjrm2NK0WJ19Q9Y6R6NqbdEY6tWocrtdcBUGMSzDRgX5vGAjKOgxXszfdKU8yC
1cDsIObzqch8J5/cqJiGcuI2kO1yLI24OuX4TpdDYHW04DRx1oAIxuPLHA/XdRd8
sH/rM6Ca7Mqu6zApteQr7onLqkkRtOupldXu+/0Bd6Ha0jrWYHjT2Qp+hrXFy59w
1rN9jHVBtK2xqa+t/DI6w3nvq6tTPVcC9/4AASb/QQJnQeettvCIm9ji7ONxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJn/QsfH21JONQjC5bqWWitjNACcwHwYDVR0j
BBgwFoAUxLUEHEMzF9ZBgDyZ8z66wRH0WJ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0dSTExtTmg3TjJweGdKNExvWDhHdDFiY2czeXFKV1ZSNUVxNUxYbVpL
NGQvMC9DNEI1MDQxQzQzMzMxN0Q2NDE4MDNDOTlGMzNFQkFDMTExRjQ1ODlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0QjUwNDFDNDMzMzE3RDY0
MTgwM0M5OUYzM0VCQUMxMTFGNDU4OUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NHUkxMbU5oN04ycHhnSjRMb1g4R3QxYmNnM3lxSldWUjVFcTVMWG1aSzRkLzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPduzANBgkqhkiG9w0BAQsFAAOCAQEAGj6D
ED2cD++UupStEd0Klz+ybQohUotZbn5qmfrJjtyNpRMesfC6FwhF7vcKWvQVB1jg
m7JHi2trD8CWeDXVqdtU0cFD360mk68ibYpUhgAihL4T9Ad6m0SRfTCCq76en6M3
FOzP8MrV6zsSmZpS5BsvWFPz1AqVj8IA3bnd6Xz46b6RtL+aAWIG4jSwMhjXKJcm
ncjsblhg2aszfwAWFy30Ptu5JpQOte85ZBvTkbstk8srCgkf3h/nJOMIFYd2+cw2
woWZdE+zreWpIhbwRan2iJZKWvsBW3VyuGwp1AfzcIWXPxQB45xOFKp8COPCuVTT
BXbCpvO54mNmFIkCPg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:46:38 2026 by rpki-client